Skip to content
OpenAdvisories
Critical DLA-400-1 4 CVEs

pound - security update

Published Jan 24, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 pound 2.6-1+deb6u1

Vulnerabilities 4

  • Critical 9.8
    CVE-2009-3555 Public exploit EPSS 87%

    Apache Tomcat affected by vulnerability in TLS and SSL protocol

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…

    openssl apache2 org.apache.tomcat:tomcat nss Debian Maven
  • Low 3.4
    CVE-2014-3566 Public exploit EPSS 100%

    The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which ma…

    openssl openssl openjdk-7 wolfssl Debian Ubuntu
  • Unscored —
    CVE-2011-3389 Public exploit EPSS 73%

    The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firef…

    asterisk curl bouncycastle nss Debian
  • Unscored —
    CVE-2012-4929 Public exploit

    The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compre…

    openssl apache2 nginx lighttpd Debian